ewebeditor(PHP) Ver 3.8 present an arbitrary file upload 0day-vulnerability warning-the black bar safety net

titleeWebeditoR3. 8 for php any file on the EXP/title form action=”" method=post enctype=”multipart/form-data” INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" URL:input type=text name=url value=”http://www.sitedirsec.com/ewebeditor/” size=1 0 0br INPUT TYPE=”hidden” name=”aStyle1 2”...

mktba V4.2 Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: mktba V4.2 Remote File Upload Vulnerability Date: 09/08/2011 Author: Dr-AnGeL home Page: Sec-1337.com So0N | Sec4ever.com | V4-Team.com | Tryag.CC | Email: email protected | email protected Category:: webapps Google dork:...

Multiple Vulnerabilities in Eleanor CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Eleanor CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Eleanor CMS The vulnerability exists due to input sanitation error in the...

CVE-2011-0701

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...

CVE-2011-0701: Exposure of Sensitive Information to an Unauthorized Actor

wp-admin/async-upload.php in the media uploader in WordPress before 3.0.5 allows remote authenticated users to read 1 draft posts or 2 private posts via a modified attachmentid parameter...

PT-2011-2570

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 3.0.5 Description The issue allows remote authenticated users to read draft or private posts by modifying the attachment id parameter in the media uploader. This is due to a flaw in the wp-admin/async-upload.php fil...

NetLink - Arbitrary File Upload

NetLink - Arbitrary File Upload ====================================== NetLink Remote Arbitrary File Upload Vulnerability Download: http://sourceforge.net/projects/kp-netlink/ by lumut-- Homepage: lumutcherenza.biz ====================================== upload.php "; echo ""; echo "Filename:...

PT-2011-2522

Name of the Vulnerable Software and Affected Versions PHPCMS 2008 V2 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the modelid parameter to the "flash upload.php" endpoint. Recommendations For PHPCMS 2008 V2, consider restricting access to t...

PT-2010-5416

Name of the Vulnerable Software and Affected Versions Orbis CMS version 1.0.2 Description The issue allows remote authenticated users to execute arbitrary code by uploading a .php file to the fileman file upload.php script and then accessing it via a direct request to the file in the uploads...

FCKeditor 2.x <= 2.4.3 Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications ========================================================== FCKeditor 2.x = 2.4.3 Arbitrary File Upload Vulnerability ========================================================== Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author:...

FCKEditor Core 2.x 2.4.3 - 'FileManager upload.php' Arbitrary File Upload

Exploit Title: FCKeditor 2.0-2.4.3 arbitrary file upload Author: grabz Software Link: http://sourceforge.net/projects/fckeditor/ Version: FCKeditor 2.x input name="NewFile" type="file...

MY-CCMS All Ver File Upload 0day-vulnerability warning-the black bar safety net

The vulnerability is located in: manage/upload.php code province ! ! 111.jpg Download 22.49 KB 4 hours ago Also you can create new“. asp”directory, there is a skip directory vulnerability, etc. EXP: the form id="frmUpload" enctype="multipart/form-data" action="http://chemlg.com/manage/upload.php"...

Developed by vehement Upload Vulnerability

Exploit for php platform in category web applications ========================================== Developed by vehement Upload Vulnerability ========================================== Author : Emre5807 Homepage : http://www.1923turk.com Dork " Developed by www.vehement.in " Developed by...

Digital College 1.0 Arbitrary Upload

======================================================================================== | Title : Digital College 1.0 upload Vulnerability | Author : indoushka | email : [email protected] | Dork : Powered by Digital College 1.0 - Magtrb Soft 2010 | Tested on: windows SP2 Français V.Pnx2 2.0 ...

CVE-2009-4819: Undefined Security Weakness

Multiple unrestricted file upload vulnerabilities in upload.php in PHPhotoalbum allow remote attackers to execute arbitrary code by uploading a file with a 1 .php.pgif or 2 .php.pjpeg double extension, then accessing it via a direct request to the file in albums/userpics/...

CVE-2009-4818: Undefined Security Weakness

Unrestricted file upload vulnerability in upload.php in PHPSimplicity Simplicity oF Upload 1.3.2 allows remote attackers to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif...

MassMirror Uploader - Multiple Remote File Inclusions

MassMirror Uploader - Multiple Remote File Inclusions ======================================== MassMirror Uploader Multiple RFI Exploit ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

odlican.net CMS 1.5 - Arbitrary File Upload

odlican.net cms v.1.5 remote file upload vulnerability Author: Anonymous you can download following cms here http://cms.odlican.net/files/cmsv1-5.zip Info:odlican.net cms v.1.5 is simple opensource cms made by croatian web designers and it has serious flaw. dork:Powered by odlican.net cms v.1.5...

CVE-2010-0279: Undefined Security Weakness

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtaine...

MobPartner Counter - Arbitrary File Upload

MobPartner Counter - Arbitrary File Upload MobPartner Counter Remote File Upload Vulnerability + Author : wlhaan hacker + Email : [email protected] + Site : www.sa-hacker.com/vb + team wlhaan Hacker + Dork : "MobPartner Counter" "upload files" The exploit : http://localhost/path/upload.php edit she...